-CLAIMS 

K A controller for executing a application program to process control information 
related to control elements comprising: 

\a. a plurality of main processor modules each of which runs the application 
\ program; 

b. \ at least one input/output module for receiving and sending control information 

\to control elements, communicating with each main processor module; 

c. anleast one communication module communicating external signals to said 
plurality of main processor modules; 

d. a time synchronizing system for synchronizing the time clocks of said main 
processor Nnodules; 

e. a voting system which exchanges information between selected ones of said 
main processormodules of said plurality of modules and compares the 
information in each processor module with the information in other selected 
ones of said main processor modules; 

f. a selection system which determines which of said plurality of processor 
modules is aj5elected„one of said plurality of main processor modules which is 
used to compare informational each processor module; 

g. a plurality of separate housings ^for enclosing electronic circuit boards 
representing said modules, having\ common physical characteristics for 
receiving said electronic circuit boards and providing housing electrical 
connectors; \ 

h. at least one base plate circuit board for mounting each module which provides 
base plate electrical connectors for receiving the housing electrical connectors; 
and \ 

L a common rail system for mounting of said at leasrone base plate circuit board 
and providing electrical connections to each of said housings. 
2. A controller as described in claim 1 wherein there are a plurality of base plate circuit 
boards, selected ones of said base plate circuit boards receiving said housing for said main 
processor modules, other selected ones of said base plate circuit boards receiving said 
housing for said at least one input/output module, and still other selected ones of said base 
plate circuit boards receiving said housing for said at least one communication module. 



A controller as described in claim 1 wherein said housing includes a mounting . 
faster^r attached to said housing which is used to mount and remove said housing from said 
base plate^rcuit board. 

4. A controller as described in claim 3 wherein said fastener is an elongated screw which 
is rotatable attached to said housing along its length such that when the screw is rotated in a 
first direction the housing electrical connectors are pulled into engagement with said base 
plate electrical connectors and when turned in an opposite direction pulls said housing 
electrical connectors out of engagement with said base plate electrical connectors. 

5. A controller as described in claim 3 further comprising a sensor for sensing a change 
in position of said fastener and a module remove detector system for indicating that the 
fastener position has changed. 

A controller for executing a application program to process control information 
relied to control elements comprising: 

a plurality of main processor modules each of which runs the application 
program; 

at least one input/output module for receiving and sending control information 
re> control elements communicating with each main processor module; 
a time synchronizing system for synchronizing the time clocks of said main 
processor modules; 

d. a voting system which exchanges information between selected ones of said 
main processor modules of said plurality of modules and compares the 
information in e^ch processor module with the information in other selected 
ones of said main processor modules; 

e. a selection system wMch determines which of said plurality of processor 
modules is a selected onesof said plurality of main processor modules which is 
used to compare inform ationan each processor module; 

f. a channel transmission validityHesting system; 

g. a plurality of separate housings foreclosing electronic circuit boards 
representing said modules, having a common physical characteristics for 
receiving said electronic circuit boards a^d providing housing electrical 
connectors; 
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at least one base plate circuit board for mounting each module which provides 
base plate electrical connectors for receiving the housing electrical connectors; 
and 

a common rail system for mounting of said at least one base plate circuit board 
id providing electrical connections to each of said housings. 

7. A controller as described in claim 6 wherein there are a plurality of base plate circuit 
boards, selected onfes of said base plate circuit boards receiving said housing for said main 
processor modules, other selected ones of said base plate circuit boards receiving said 
housing for said at least one input/output module, and still other selected ones of said base 
plate circuit boards receiving said housing for said at least one communication module. 

8. A controller as described in claim 1 wherein said housing includes a mounting 
fastener attached to said housing which is used to mount and remove said housing from said 
base plate circuit board. 

9. A controller as described in claim 3 wherein said fastener is an elongated screw which 
is rotatable attached to said housing along its length such that when the screw is rotated in a 
first direction the housing electricalVonnectors are pulled into engagement with said base 
plate electrical connectors and when turned in an opposite direction pulls said housing 
electrical connectors out of engagemenrvwith said base plate electrical connectors. 

10. A controller as described in claim\3 further comprising a sensor for sensing a change 
in position of said fastener and a module remove detector system for indicating that the 
fastener position has changed. 

11. A controller for executing a application\program to process control information 
related to control elements comprising: 

a. a plurality of main processor modules each of which runs the application 
program; 

b. at least one input/output module for receiving and sending control information 
to control elements, communicating withWch main processor module; 

c. at least one communication module communicating external signals to said 
plurality of main processor modules; 

d. a time synchronizing system for synchronizing\{he time clocks of said main 
processor modules; 

e. a voting system which exchanges information between selected ones of said 
main processor modules of said plurality of modules and compares the 
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information in each processor module with the information in other selected 
ones of said main processor modules; 

f. a selection system which determines which of said plurality of processor 
modules is a selected one of said plurality of main processor modules which is 

5 used toVompare information in each processor module; 

g. a plurality of separate housings for enclosing electronic circuit boards 
representing said modules, having a common physical characteristics for 
receiving sard electronic circuit boards and providing housing electrical 
connectors; \ 

10 h. at least one baseplate circuit board for mounting each module which provides 

base plate electrical connectors for receiving the housing electrical connectors; 
and 

i. a common rail systerfo for mounting of said at least one base plate circuit board 
and providing electrical receptacles to each of said housings. 

15 12. A controller as described in claim 1 wherein there are a plurality of base plate circuit 
boards, selected ones of said base plate circuit boards receiving said housing for said main 
processor modules, other selected ones of said base plate circuit boards receiving said 
housing for said at least one input/output module, and still other selected ones of said base 
plate circuit boards receiving said housing for^aid at least one communication module. 

20 13. A controller as described in claim 1 wherein said housing includes a mounting 

fastener attached to said housing which is used toVnount and remove said housing from said 
base plate circuit board. 

14. A controller as described in claim 3 wherein haid fastener is an elongated screw which 
is rotatable attached to said housing along its length su\h that when the screw is rotated in a 

25 first direction the housing electrical connectors are pullea into engagement with said base 
plate electrical connectors and when turned in an oppositeViirection pulls said housing 
electrical connectors out of engagement with said base plateyelectrical connectors. 

15. A controller as described in claim 3 further comprising a sensor for sensing a change 
in position of said fastener and a module remove detector syste^n for indicating that the 

30 fastener position has changed. 

16. A controller for executing a application program to process\pontrol information 
related to control elements comprising: 
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f\9\^ ^ a plurality of main processor modules each of which runs the application 
program; 

at least one input/output module for receiving and sending control information 
v to control elements communicating with each main processor module; 
5 c. avtime synchronizing system for synchronizing the time clocks of said main 

processor modules; 

d. a voting system which exchanges information between selected ones of said 
main processor modules of said plurality of modules and compares the 
information in each processor module with the information in other selected 

10 ones of saicimain processor modules; 

e. a selection system which determines which of said plurality of processor 
modules is a selected one of said plurality of main processor modules which is 

j used to compare information in each processor module; 

f a plurality of separate housings for enclosing electronic circuit boards 
15 representing said moaules, having a common physical characteristics for 

receiving said electronic circuit boards and providing housing electrical 
connectors; 

g. at least one base plate circiKt board for mounting each module which provides 
base plate electrical receptacles for receiving the housing electrical connectors; 

20 and \^ 

h. a common rail system for mounting of said at least one base plate circuit board 
and providing electrical connectioiiis to each of said housings. 

17. A controller as described in claim 6 whereir\here are a plurality of base plate circuit 
boards, selected ones of said base plate circuit boards\^ceiving said housing for said main 

25 processor modules, other selected ones of said base plata circuit boards receiving said 

housing for said at least one input/output module, and still\other selected ones of said base 
plate circuit boards receiving said housing for said at least one communication module. 

18. A controller as described in claim 1 wherein said housing includes a mounting 
fastener attached to said housing which is used to mount and remove said housing from said 

30 base plate circuit board. 

19. A controller as described in claim 3 wherein said fastener is ^n elongated screw which 
is rotatable attached to said housing along its length such that when th^ screw is rotated in a 

„ first direction the housing electrical connectors are pulled into engagement with said base 





{\^^pl\te electrical connectors and when turned in an opposite direction pulls said housing 
electrical connectors out of engagement with said base plate electrical connectors. 

20. \ A controller as described in claim 3 further comprising a sensor for sensing a change 
in position of said fastener and a module remove detector system for indicating that the 

5 fastener position has changed. 

21. A controller for executing a application program to process control information 
related to control elements comprising: 

a. \a plurality of main processor modules each of which runs the application 
ptogram; 

10 b. a time synchronizing system for synchronizing the time clocks of said main 

processor modules; 

c. a voting system which exchanges information between selected ones of said 
3 main processor modules of said plurality of modules and compares the 

~ information in each processor module with the information in other selected 

*j 1 5 ones of saidVnain processor modules; 

n d. a selection sysiem which determines which of said plurality of processor 

" modules is a selected one of said plurality of main processor modules which is 

;* used to compare mformation in each processor module; 

* e. a plurality of separate housings for enclosing electronic circuit boards 

5 20 representing said modules, having a common physical characteristics for 

» receiving said electronic circuit boards and providing housing electrical 

connectors; 

f. at least one base plate circiHt board for mounting each module which provides 
base plate electrical connectors for receiving the housing electrical connectors; 

25 and 

g. a common rail system for mounting of said at least one base plate circuit board 
and providing electrical connections to each of said housings. 

22. A controller as described in claim 1 1 whereiia there are a plurality of base plate circuit 
boards, selected ones of said base plate circuit boards Veceiving said housing for said main 

30 processor modules, other selected ones of said base platb circuit boards receiving said 

housing for said at least one input/output module, and stillyother selected ones of said base 
plate circuit boards receiving said housing for said at least one communication module. 
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13. A controller as described in claim 1 1 wherein said housing includes a mounting 

stener attached to said housing which is used to mount and remove said housing from said 
basfe plate circuit board. 

24. \ A controller as described in claim 13 wherein said fastener is an elongated screw 

5 which rs rotatable attached to said housing along its length such that when the screw is rotated 
in a first direction the housing electrical connectors are pulled into engagement with said base 
plate electrical connectors and when turned in an opposite direction pulls said housing 
electrical connectors out of engagement with said base plate electrical connectors. 

25. A controller as described in claim 13 further comprising a sensor for sensing a change 
10 in position of said fastener and a module remove detector system for indicating that the 

fastener position h^s changed. 

26. A controller &s described in claim 1 1 further comprising at least one input/output 
.3 module for receiving arjd sending control information to control elements in said control 
=S system communicating \^ith each of said plurality of main processor modules. 

^15 27. A controller as des\ribed in claim 1 1 further comprising at least one communication 
R module receiving communicating external signals to of said plurality of main processor 
modules. \ 

* 28. A controller as describedNin claim 1 1 further comprising: 

* a. at least one input/oujput module for receiving and sending control information 
5 20 to control elements imsaid control system communicating with each of said 

- plurality of main processor modules; and 

b. at least one communicati^i module for sending and receiving external signals 
communicating with each ^f said plurality of main processor modules. 



utW 



29. A control system platform for executing a application program to process control 
25 information related to control elements comprising: 

a. a plurality of main processor modules each of which runs the application 
program; \ 

b. at least one input/output module for receiving and sending control information 
to control elements communicating with\^ch main processor module; 

30 c. at least one communication module commui^icating external signals to said 

plurality of main processor modules; 
d. a time synchronizing system for synchronizing t^ie time clocks of said main 
processor modules; 




a voting system which exchanges information between selected ones of said 
main processor modules of said plurality of modules and compares the 
information in each processor module with the information in other selected 
)nes of said main processor modules; 
5 f. a\election system which determines which of said plurality of processor 

moaules is a selected one of said plurality of main processor modules which is 
used ro compare information in each processor module; 

g. a plurality of separate housings for enclosing electronic circuit boards 
representing said modules, having a common physical characteristics for 

10 receiving saifl electronic circuit boards and providing housing electrical 

connectors; \ 

h. at least one baseplate circuit board for mounting each module which provides 
] base plate electrical connectors for receiving the housing electrical connectors; 

and \ 

i. a common rail system for mounting of said at least one base plate circuit board 
and providing electrical connections to each of said housings. 

30. A control system platform described in claim 19 wherein there are a plurality of base 
plate circuit boards, selected ones of said base plate circuit boards receiving said housing for 
said main processor modules, other selected oKes of said base plate circuit boards receiving 

^20 said housing for said at least one input/output module, and still other selected ones of said 
■ ^ base plate circuit boards receiving said housing foresaid at least one communication module. 

31. A control system platform as described in ckJim 1 9 wherein said housing includes a 
mounting fastener attached to said housing which is us^d to mount and remove said housing 
from said base plate circuit board. 

25 32. A control system platform as described in claim 21 Nyherein said fastener is an 

elongated screw which is rotatable attached to said housing along its length such that when 
the screw is rotated in a first direction the housing electrical correctors are pulled into 
engagement with said base plate electrical connectors and when turned in an opposite 
direction pulls said housing electrical connectors out of engagement\with said base plate 

30 electrical connectors. 

33. A control system platform as described in claim 21 further comprising a sensor for 
sensing a change in position of said fastener and a module remove detecto^ system for 
indicating that the fastener position has changed. 
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3^. A control system platform for executing a application program to process control 
information related to control elements comprising: 

,a. a plurality of main processor modules each of which runs the application 
program; 

at least one input/output module for receiving and sending control information 
to control elements communicating with each main processor module; 
a^time synchronizing system for synchronizing the time clocks of said main 
processor modules; 

d. a voting system which exchanges information between selected ones of said 
main processor modules of said plurality of modules and compares the 
information in each processor module with the information in other selected 
ones of saidNriain processor modules; 

e. a selection system which determines which of said plurality of processor 
modules is a selected one of said plurality of main processor modules which is 
used to compare information in each processor module; 

f. a plurality of separatevhousings for enclosing electronic circuit boards 
representing said modules, having a common physical characteristics for 
receiving said electronic circuit boards and providing housing electrical 
connectors; 

g. at least one base plate circuit tibard for mounting each module which provides 
base plate electrical connectors ft^ receiving the housing electrical connectors; 
and 

h. a common rail system for mounting o£ said at least one base plate circuit board 
and providing electrical connections to each of said housings. 

A control system platform as described in claim 24 wherein there are a plurality of 
base plate circuit boards, selected ones of said base plate circuit boards receiving said housing 
for said main processor modules, other selected ones of said base plate circuit boards 
receiving said housing for said at least one input/output module, ^and still other selected ones 
of said base plate circuit boards receiving said housing for said at l\ast one communication 
module. 

36. A control system platform as described in claim 24 wherein saiclhousing includes a 
mounting fastener attached to said housing which is used to mount and remove said housing 
from said base plate circuit board. 
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A control system platform as described in claim 26 wherein said fastener is an 
elWgated screw which is rotatable attached to said housing along its length such that when 
the screw is rotated in a first direction the housing electrical connectors are pulled into 
engagement with said base plate electrical connectors and when turned in an opposite 
direction pulls said housing electrical connectors out of engagement with said base plate 
electrical connectors. 

38. A control system platform as described in claim 26 further comprising a sensor for 
sensing a change in position of said fastener and a module remove detector system for 
indicating tha v t the fastener position has changed. 

39. A contrbl system platform as described in claim 29 wherein there are a plurality of 
base plate circuit\boards, selected ones of said base plate circuit boards receiving said housing 
for said main processor modules, other selected ones of said base plate circuit boards 
receiving said housing for said at least one input/output module, and still other selected ones 
of said base plate circuit boards receiving said housing for said at least one communication 
module. \ 

40. A control system platform as described in claim 29 wherein said housing includes a 
mounting fastener attacheckto said housing which is used to mount and remove said housing 
from said base plate circuit board. 

41 . A control system platform as described in claim 3 1 wherein said fastener is an 
elongated screw which is rotatable attached to said housing along its length such that when 
the screw is rotated in a first direction the housing electrical connectors are pulled into 
engagement with said base plate electrical connectors and when turned in an opposite 
direction pulls said housing electricakconnectors out of engagement with said base plate 
electrical connectors. \ 

42. A control system platform as described in claim 31 further comprising a sensor for 
sensing a change in position of said fastenW and a module remove detector system for 
indicating that the fastener position has changed. 

43. A control system platform as described in claim 29 further comprising at least one 
input/output module for receiving and sending \pntrol information to control elements in said 
control system communicating with each of said plurality of main processor modules. 

44. A control system platform as described in claim 29 further comprising at least one 
communication module receiving communicating external signals to of said plurality of main 
processor modules. 
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A control system platform as described in claim 29 further comprising: 
a. at least one input/output module for receiving and sending control information 
to control elements in said control system communicating with each of said 
plurality of main processor modules; and 

at least one communication module for sending and receiving external signals 
communicating with each of said plurality of main processor modules. 
A computer control system for e xecuting a application program to process control 

:omprising: 

sor modules each of which runs the application 



information related to control elements 
a. a pmrality of main proce: 
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at least one input/output ^/ua^le for receiving and sending control information 
to control Elements com|}Siiiicating with each main processor module; and 
c. a time synchronizing system for synchronizing the time clocks of said main 
processor modules. 

15 47. a time synchronizing sysWi as described in claim wherein said rendezvous signals 
are sent during a scan cycle and sam update signal occurs at least once during each scan cycle. 
48. A computer control system asVlescribed in claim 37 further comprising at least one 
communication module for communicating with said main processor modules and external 
signals. \ 

20 49. A computer control system as described in claim 38 wherein there are a plurality of 
communication modules each module communicating independently with said main 
processor modules and said input/output module. 



50. A computer control system for executing a application program to process control 
25 information related to control elements comprising: 

a. a plurality of main processor modules each ^f which runs the application 
program; 

b. at least one input/output module for receiving add sending control information 
to control elements communicating with each mairkprocessor module; 

30 c. a time synchronizing system for synchronizing the time clocks of said main 

processor modules; 

d. a voting system which exchanges information between selected ones of said 
main processor modules of said plurality of modules and compares the 




information in each processor module with the information in other selected 
ernes of said main processor modules; 

a selection system which determines which of said plurality of processor 
modules is a selected main processor module which is used to compare 
infonr^tion in each processor module; 

a plurality of separate housings for enclosing electronic circuit boards 
representing said modules, having a common physical characteristics for 
receiving said electronic circuit boards; and 



g. a common rail^system for mounting of said housings and providing electronic 
10 connections to bach of said housings. 

h. apparatus for sending a rendezvous signal to all other main processor modules; 

i. apparatus for receiving a rendezvous signal form all other main processor 
modules; \^ 

j. a system for determining the clocking midpoint of all processor signals; 
15 k. a clock update apparatus\which sends update signals to the clock to increase 

the clock rate if slower tha^the clocking midpoint; and 
1. a clock update apparatus whi^h sends update signals to the clock to decrease 

the clock rate if faster than the\clocking midpoint. 

51. A control system platform for executing^ control system program for managing a 

20 control system and evaluating the accuracy of information related to said control system, said 
platform comprising: 

a. a plurality of main processor modules^ each executing a copy of said 
application program; \ 

b. at least one field input/output module communicating with each main 
25 processor module; and 

c. a voting system for comparing information between said main processor 
modules \ 

d. restoring any invalid information. \ 

52. A control system platform as described in claim 4 wherein said information is selected 
30 from the group consisting of: 

a. program code, 

b. fault detection information, 

c. sensor information, 
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command information, 
output information, 
input information, and 
any combination of a through f 

53. A control system for executing a application program and evaluating the accuracy of 
input/output information comprising: 

a. a plurality of main processor modules, each executing said application 
program; 

b. at leasfyone field input/output module communicating with each main 
processor module; and 

c. a voting system for comparing information between said main processor 
modules. 

54. A control system for Executing a applicat 
a. 



d. 



processors; 
memory in said transmitting ^: 



on program comprising: 



a plurality of main processor mod ales; 

at least one fieldinput/output module communicating with each main 
processor module; Vnd 

an attenuated feed b^ck system fo|* determining faults in main processor 
communications. 

an attenuated loop backWth for all channel transmission information sent over 
a communication channelNby the transmitting processor to any other 



br storing the loop-back information 
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received over said attenuatec^l^e^n55fej^ path; 

a comparison system for compi^t £^fie channel transmitted information with 
the loop back information stored i k memory; 

apparatus for storing a fault code where said channel transmitted information 
does not compare to said loop back information; 

a comparison system for comparing the\loop-back information stored in said 
memory with the information as transmitted to other processors which is 
retransmitted to said transmitting processof 

a comparison system for compari lg the retransmitted information with the 



loop back information stored in 



T 



emory; and 




apparatus for storing a fairit^fee^where said retransmitted information does 
not compare to said loop ^^information, 
ntrol system platform for executing a application program comprising: 
a plurality of main processor modules; 

least one field input/output module communicating with each main 
pVocessor module; and 

a common housing for enclosing each main processor module, having a 
plurality of indicators for indicating the status of each processor. 





56. A channel transmission validity testing system in each processor comprising: 

an attenuated loop back path for all c/hannel transmission information sent over 
a communication channel by the transmitting processor to any other 
processors; 

memory in said transmitting prg^ss)^ for goring the loop-back information 
received over said attenuate(^cjpt)^^k / path; 

c. a comparison system tor comparing the channel transmitted information with 
the loop back information storep in memory; and 

d. apparatus for storing a faiht co^e where said channel transmitted information 
does not compare to said lo^p/back information. 

10 57. A control system platform for executing a application program comprising: 

a. At least one main processor modules; 

b. at least one field input/output moaule communicating with said main 
processor module; and 

c. a common housing for enclosing said\nain processor module and said 
input/output module, having a plurality W indicators for indicating the status 
of each module. 

A controller for executing a application program toNprocess control information 
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related to control elements comprising: 

a. a plurality of main proces^pf^SM^^les; 
b. 



at least one field input/output module for receiving and sending control 




information communicating ^ith each main processor module; 



£1 





10 



115 60. 



a timer system for synchronizing time between said main processor module; 
and 

d. at least one communication module for ccpimunicating with said main 
processor modules and external signals. 
59. A controller for executing a application prograr^ to process control information 
related to control elements comprising: 

a. a plurality of main processor modules;/ 

a plurality of communication modules for communicating with said main 
processor modules and said input/output module; 

a timer system for synchronizing tirpe between said main processor module; 
and 

at least one redundant field input/ofutput module having a plurality of field 
interconnections for receiving and sending control information communicating 
with each main communication module. 
A time synchronization system in eac> ^ain processor of a plurality of processors for 



b. 



c. 



d. 
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synchronizing the time clocks of said main^^fe^^r modules comprising: 
a time synchronizing system comprising: ' ^ . J 

a. apparatus for sending a ren^ez^OH^ signal to all other main processor modules; 

b. apparatus for receiving a rendezvous signal form all other main processor 
modules; 

c. a system for determining the/clocking midpoint of all processor signals; 

d. a clock update apparatus wHich sends update signals to the clock to increase 
the clock rate if slower than! the clocking midpoint; and 

e. a clock update apparatus which sends update signals to the clock to decrease 
the clock rate if faster than! the clocking midpoint. 

61 . A time synchronization system in ja control system platform comprising: 
a time synchronizing system as described in claim 69 wherein said rendezvous signals are 
sent during a scan cycle and said update signal occurs at least once during each scan cycle. 

62. A time synchronization system in a control system platform comprising plurality of 
communication modules each module cpmmunicating independently with said main 
processor modules and said input/output module. 
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A synchronized control system as described in claim 8 further comprising a plurality 
of input/otttRut modules for communicating with the control field and said main processor 
modules and saiaTnpjit/output module. 

64. A synchronized cdrttrQl system as described in claim 10 wherein there are a plurality 
5 of communication modules each module communicating independently with said main 
processor modules and said input/output mbd^ 

A synchronized control system as described in claim 12 wherein there are a plurality 
of communication modules each module communicating independently with said main 
processor modules and said input/output module. 
10 \66. A synchronized control system as described in claim 13 further comprising a plurality 
OAredundant input/output modules for communicating with the control field and said 
communication modules. 

^° \\ synchronized control system as described in claim 1, wherein said main processor 
module includes: 

15 V a main processor section having a program executive which runs said control 

system; and 

b. \an input/output section having a program executive for management of input 
output functions. 

68. A synchronised control system as described in claim 1, wherein said main processor 
20 module includes a tim\synchronization system which compares time between a separate time 

base and each main processor time and increments or decrements time by a pre-determined 
amount until the time for each processor matches said time base. 

69. a voting system which exchanges information between selected ones of said main 
processor modules of said plurality^of modules and compares the information in each 

25 processor module with the information in other selected ones of said main processor modules 
comprising: \ 

a. an apparatus for loading conttol system related information from each 
processor for storage in every oth^r processor; 

b. a comparison apparatus for companhg loaded control system related 
information with the comparing processor's control system information; 



c. memory for storing the results of said comparison; 
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a selection apparatus for determining which loaded information compares with 
said comparing processor's information; 



default apparatus for storing a default indication where the comparing 
processor's information fails to compare with a majority of said loaded 
processor information. 

70. a time synchronizing system as descried in claim wherein said rendezvous signals 
are sent during a scan cycle and said updat^^nal occurs at least once during each scan cycle. 

71 . A control system flar executing a application program and evaluating the accuracy of 
input/output information corcmrising: 

a. a plurality of main processor modules; 

b. at least one field irmut/output module communicating with each main 
processor module; a^d 

c. a voting system for comparing information between said main processor 
modules. 

72\ A control system for executing a application program and evaluating the accuracy of 
input/output information comprising: 

a. \ ^plurality of main processor modules; 

b. /f^at least one field input/output module communicating with each main 
processor module; and 

c. a votingsystem for comparing information between said main processor 
modules. 

73. \ A control system for executing a applicatior/program comprising: 
a plurality of main processor modujfes, 

at least one field input/output mQfifede communicating with each main 
processor module; and 

Herniated feed back system predetermining faults in main processor 
communications. / 



c. 



74. 



A control system platform for executing a application program comprising: 

a. a pluralityW main processor modules; 

b. at least one field input/output module communicating with each main 
processor module\and 
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c. a common housing for enclosing each main processor module; having a 
plurality of indicators for indicating the^tatus of each processor. 
75. A control system platform for running a control system program which processes 
information related to a control system; said control/system platform comprising: 
5 a. a plurality of processors each executing said control system program and 

processing said control system information; 
b. at least one input/output module fojr sending and receiving said information 

related to said control system communicating with said plurality of processors; 



0 c. a validation system for evaluating said control system information to be 

processed by said control systerp program prior to processing by said control 
system program; 

76. A control system platform for running Ja control system program which processes 
information related to a control system; said control system platform comprising: 
5 a. a plurality of processors each < xecuting said control system program and 

processing said control system information; 
b. at least one input/output modijlfijbr sending and receiving said information 
related to said control syste^i;jco<tununicating with each of said processors; 



c. at least one communication m )dule for receiving external signals and 
exchanging external signals with each of said processors and external signals. 

d. a validation system for evaluating said control system information to be 
processed by said control syst program prior to processing by said control 
system program. 

a channel transmission validity testing syster i in each processor comprising: 

a. an attenuated loop back path 1 "or all channel transmission information sent over 
a communication channel by i he transmitting processor to any other 
processors; 

memory in said transmitting processor for storing the loop-back information 
received over said attenuated oop-back path; 

a comparison system for com >aring the channel transmitted information with 
the loop back information sto *ed in memory; 



72 




apparatus for storing a fault code wnere said channel transmitted information 
does not compare to said loop baclf information; 

c. la comparison system for comparing the loop-back information stored in said 
memory with the information as transmitted to other processors which is 
retransmitted to said transmifw^processor ; 

d. a comparison system for c6 f n]*'^ n g the retransmitted information with the 
loop babk information stor£?Tin memory; and 

e. . apparatusVor storing a fault/code where said retransmitted information does 
not compareyto said loop back information. 

77. A control system platform for running a control system program which processes 
n information related to a controPsystem; said control system platform comprising: 
^=3 a . a plurality of processors executing said control system program and processing 

i;n said control system information said processors mounted to a common power 

rfi 5 rail; 

*|j b. at least one input/outpukmodule for sending and receiving said information 

related to said control system; communicating with each of said processors 
j y mounted to said common pojver rail commipicatTng with said plurality of 

V Z processors; 

U 10 c. at least one communication module for.receiving external signals and 

exchanging external signals with each of said processors and external signals; 
mounted to said common power rail\communicating with said plurality of 
processors over a communications bus^ 

d. a validation system on each processor for evaluating said control system 
1 5 information to be processed by said control system program prior to 

processing by said control system progranAsaid evaluation system comparing 
categories of information stored in memory on each processor with the same 
category of information in memory on other processors and selecting 
information on which a majority of processors cbmpare as valid information 
20 and storing said valid information into the memory of any processor for which 

the information did not compare with the majority processors. 

e. said processors are interconnected on an inter-processW bus through a loop- 
back path; said loop back path applying the signals for transmitting 

n 




information by each transmitting processor to other processors on said bus as 
an attenuated loop-back signal to said transmitting processor; 

f. a storage area in the transmitting processor memory for storing said loop-back 
informatior 

g. a comparator ^for comparing signals transmitted by said other processors on 
said bus with saiiLloop back signals to determine if the information in said 
signals is the same a&Ahe signals transmitted by said other processors is the 
same and the loop back^signal information. 

78. A system for determining the validity of transmitted information on a control system 
platform bus comprising: 

a. an attenuated loop-back path attached to {said bus which communicates 
transmitted information to a transmitting processor transmitting said 
information over said bus; 

b. capture registers resident in said transmitting processor for capturing said loop 
back information in said memory; 

c. a comparator for comparing said attembatecNoop back information captured in 
memory with the information transmitted by skid transmitting processor; 

d. capture registers resident in said trans? iiitting processor for capturing 
information related to said infoirnati^nJtransmittedVhich is received from 
other processors on said bus bylsaicfT.apsmitting processor; 

e. a comparator for comparing sai<4 atte^^ated loop back information captured in 
memory with the information receivjbd by said transmittin^\processor from 
other processors on said bus. 

79. An enclosure for circuit boards comprising 

a. a cover; having a face plate which deceives an outer cover having hjdicia 
thereon identifying the circuit boaifd functions; 

b. a base; having fasteners for connecting said base to said cover; said bas\ 
having a plurality of openings for d eceiving connectors for interconnectin^said 
circuit boards to external conneciors; 

c. an unitary elongated fastener whifch is rotatably received in said enclosure for 
mounting and removing said enclosure. 





An enclosure as described in claim 79 wherein said enclosure circuit boards comprise 
a separate circuit a power board and a separate function aboard interconnected at one end of 
and received within said enclosure and mounted theretojl 

81 . An^enclosure as described in claim 80 wherein jfeaid power board and said function 
board each ha^e elongated ground pins extending through said base and disposed in a pattern 
such that said gronnd pins are received by a mating ^ound receptacle in a single position. 
82?\ An enclosure as described in claim 79 further comprising a detector for sensing the 
positional' saic^ongated fastener when the same is rotated. 

83. An eii)s4c)$uife as described in claim 82 wheribin said elongated fastener includes a 
characteristic whr&ji changes position when the saifie is rotated and said detector senses the 
change of position of S&4 characteristic. 

A common enclosure for control system circuit boards comprising: 

a. a cover; having heat dissipation surface and including a face plate which 
receives an outer cover having inilicia thereon identifying the circuit board 
functions and a plurality of openings to permit a plurality of LED indicators to 
bb^isible through said covetf: 

b. a basb^having heat dissipation iurfgfce and including fasteners for connecting 
said basest*) said cover; said base having a plurality of openings for receiving 
connectors fbr interconnecting; said circuit boards; 

c. an unitary elongated fastener ^vhich is rotatably secured in said enclosure for 
mounting and removing said Jbnclosure. 

\§l ^VXn enclosure as described in claim 8*4 wherein said heat dissipating means includes a 
finjieds^Qace on said cover and said base. 

"S6^i\n enclosure as described in claim further comprising at least one thermal conductive 
medium adja&ent^o an inner surface of sai(& enclosure. 

87. An enclosure asdeSeril^ed in claim 81 wherein said enclosure receives at least one 
circuit board and said circuit board isctrnfiigdj to elongated grounding pins attached to said 
enclosure which extend beyond connectors couplecTttr-saifl circuit board. 
^^8^^ An enclosure as described in clairA 87 wherein there are a plurality of circuit boards 
receivetR*y said enclosure further comprising at least one power board and at least one 
function board^Saimat^ast one power bpard and at least one function board interconnected 
.at one end received wiuSn^aid enclosure and mounted thereto. 
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!9. An enclosure as described in claim 88 wherein said power board and said function 
board each are electrically coupled to elongated ground i^ns extending through said enclosure 
andxiisposed such that said ground pins can only be inserted into a ground receptacle in a 
singleWsition. 

5 90. An enclosure as described in claim 88 further Comprising a detector for sensing the 
position oY said elongated fastener when the same is rotated. 

91 . An enclosure as described in claim 84 where^i said elongated fastener includes a 
characteristic which changes position when the sam^ is rotated and said detector senses the 
change of position of said characteristic. 
METHOD CLAIMS 

10 92. A method fot determining the validity of transmitted information on a bus in a 

multiple processor system comprising: 
] a. transmitting a category of informatijon from a first processor on said bus to a 

I second processor on the bus 

I b. passing said transmitted informat'ioji tjatfrough an attenuated loop-back path to 

115 said first processor; 

* c. capturing said transmitted loop-ba^kiiformation in said first processor 

memory; 

d. comparing said attenuated loop badk information captured in said first 

processor memory witnvthe information transmitted by said first processor; 
20 e. storing a first result of satd comparing in said first processor's memory; 

f faulting the first processor When thje first result indicates a difference in said 

transmitted information and said l0op-back information; 
g. capturing information which isS^eqeived by said first processor from a second 

processor on said bus in said firs^rocessor memory; 
25 h. comparing the captured informatiph from said second processor with the same 

category of information in said fitfst processor memory, and 
i. faulting the first processor when the second result indicates a difference in said 

information. 

93. A method for determining the voting mode of a plurality of processors each having 
30 memory and coupled to a inter processor bus comprising: 
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exchanging information with said plurality of processors over said bus 
transmitting a category of information from a first processor on said bus to a 
second processor on the bus 

passing said transmitted information through an attenuated loop-back path to 
said first processor; 

capturing said transmitted loop-back information in said first processor 
memory; 

d. comparing said attenuated loop back information captured in said first 

processor memory with the information transmitted by said first processor; 
10 e. storing^ first result of said comparing in said first processor's memory; 

f. faulting the first processor when the first result indicates a difference in said 
„C5 information 

? 3 g. capturing second processor information which is received by said first 

H processor frorta a second processor on said bus in said first processor memory; 

- / \ 

= Jjl 5 h. comparing said>second processor captured information with the same category 

[j of information in\said first processor; and 

i. faulting the secono\processor when the second result indicates a difference in 
said information 

* j. reconfigure system to perform comparison with memory information from 

320 other processors without using faulted processors. 

33 94. A method of voting between a plurality of processors having memory comprising: 

a. exchanging information be\ween said processors; 

b. comparing information in selected categories in each processor, with the 
information received from otnfer processors in the same selected category; 

25 c. determining if said information conforms in a majority of processors in said 

category; \^ 
d. restoring said conformed category \f information in all non-conforming 
processors 

95. A method of voting as described in claim 42 comprising the following additional step 
30 of determining a midpoint value where three processors are voting analog input information. 

96. A method of voting as described in claim 42 comprising the following additional step 
of determining a majority value where three processors are voting discrete input information. 
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9 a A method of voting as described in claim 42 comprising the following additional step 
of oetermining an average value where two processors are voting analog input information. 

98. \ A method of voting as described in claim 42 comprising the following additional step 
of determining a unanimous value where two processors are voting discrete input 

5 information. 

99. A method of synchronizing time within eac# processor comprising: 

a. \ sensing a synchronization signal frc/m each synchronizing processor; 

b. determining which synchronizing processor synchronization signal occurs at 
tf^e midpoint of time; 

10 c. selecting the midpoint synchrohi^m^processor time base; 

d. incrementing the rate of clockin^-eflhe latest synchronizing processor time 
base by\a selected number; 

e. decrementing the rate of clocl^ng of the earliest synchronizing processor by a 
selected number. 

15 1 00. A method of synchronizing time as described in claim 48 wherein said processor has a 
predetermined scan rate and s^id method is repeated for each scan. 

101. A method of synchronizing time as described in claim 48 wherein said selected 
number is a predetermined time increment. 

a. apparatus for sending a rendezvous signal to all other main processor modules; 

\ 

20 b. apparatus for receiving rendezvous signal form all other main processor 

modules; 

c. a system for determining the clocking midpoint of all processor signals; 

\ 

d. a clock update apparatus wft^ch sends update signals to the clock to increase 
the clock rate if slower than the clocking midpoint; and 

25 e. a clock update apparatus whicli\sends update signals to the clock to decrease 

the clock rate if faster than the clocking midpoint. 

102. A method of synchronizing time in ejach rrfain processor for synchronizing the time 
clocks of said main processor modules the^^teps comprising: 

: a. sending a rendezvous sigr/jaf £dNfril othe^ main processor modules; 

b. receiving a rendezvous signal from all other main processor modules, 

c. determining the clocking /nidpoint of all processor signals; 
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determining the clock which is late an/5 adjusting said clock to increase the 
clock rate if earlier than the clocking midpoint; and 

determining the clock which is early and adjusting said clock to decrease the 
slock rate if later than the clocking/midpoint. 



103. A time synchronizing method as described m claim 111 wherein said rendezvous 
signals are sent during^a scan cycle and said adjusting step occurs at least once during each 
scan cycle. 

104. A method of testing information in a plurality of processors for accuracy the steps 
comprising: 

a. loading control sykem related information from each processor for storage in 
every other processor 

b. comparing said loadedVontrol system from other processors with related 
information with the comparing processor's control system information; 

c. storing the results of said comparison in memory; 

d. determining which loaded information compares with said comparing 
processor's information; 

e. storing a status indication where th^comparing processor's information fails 
to compare with a majority of said loaded processor information. 



105. A method for determining which of said plurality of. 
processor modules is a selected one of said plurality of main\processor modules which is to 
be used to compare information in each processor module the steps comprising: 

a. transmitting information on a bus from the testin^vprocessor module to other 
processor modules; 




b. sampling the information transmitted; 

c. comparing the sample with the information transmitted; 
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setting a fault indication if the information transmitted does not compare with 
the information sampled; and 

removing the processor having a fault indication from operation; 

reconfiguring the plurality of main processor modules to operate without said 
faulted processor. 



106. A method for channel transmission validity testing system in each processor 
comprising the following stfeps: 

a. transmitting information from a transmitting processor to at least one receiving 
processor on cLwrtnel; 

b. sending such information through An attenuated loop back path to said 
transmitting processor, 

c. comparing the channel tra^snfti^fed information with the loop back information 
stored in memory; and 

d. storing a fault code where sa/d\(iannel transmitted information does not 
compare to said loop back ^lformS 
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